Seit Mai 2026 täuschen Angreifer Beschäftigte mit gefälschten IT-Anfragen und stehlen Daten aus Cloud-Diensten.

Healthcare organizations can now add HIPAA-compliant AI chat, document analysis, and medical transcription to Microsoft Power Automate flows, Power Apps, and Copilot Studio agents without writing code ...

TL;DR: Using a refund workflow in ADK, we'll cover fan-out and fan-in, deterministic and agent routers, human-in-the-loop ...

A new phishing kit abuses a legitimate Microsoft device authorization flow intended for use with printers or smart TVs to steal authentication tokens, register attacker-controlled devices and gain ...

Microsoft says threat actors posing as IT helpdesk staff are tricking employees into phishing and device-code attacks that lead to persistent cloud access. Attackers are using passkey-themed social ...

Attackers are calling or texting employees on their personal phones, posing as internal IT staff, in a social engineering campaign that tricks them into handing over access to corporate cloud accounts ...

The activity, observed since May 2026, relies heavily on social engineering. Victims may receive a phone call, SMS message, or Microsoft Teams message from someone impersonating the organization’s IT ...

Microsoft Security Research is tracking active cloud-based intrusions spanning multiple accounts in which unusual sign-ins were followed by threat actor-added authentication methods, high-volume ...

A newly discovered Python implant called “TWINLOOT” abuses multiple trusted Microsoft services to hide its command-and-control (C2) communications from security tools, Ontinue reported Tuesday. The ...

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach reports, expert analysis, and actionable insights for infosec professionals and ...